You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Irbe Krumina 90b4358113 cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252) ... In dynamically changing environments where ACME account keys and certs are stored separately, it can happen that the account key would get deleted (and recreated) between issuances. If that is the case, we currently fail renewals and the only way to recover is for users to delete certs. This adds a config knob to allow opting out of the replaces extension and utilizes it in the Kubernetes operator where there are known user workflows that could end up with this edge case. Updates #18251 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		5 days ago
..
deploy	cmd/k8s-operator: fixes helm template for oauth secret volume mount (#18230)	1 week ago
e2e	cmd/k8s-operator: simplify scope of e2e tests (#17076)	4 months ago
generate	cmd/k8s-operator: support workload identity federation	2 months ago
api-server-proxy-pg.go	cmd/k8s-operator: remove Services feature flag detection	2 months ago
api-server-proxy-pg_test.go	cmd/k8s-operator: allow HA ingresses to be deleted when VIP service does not exist (#18050)	4 weeks ago
api-server-proxy.go	cmd/{k8s-operator,k8s-proxy},kube: use consistent type for auth mode config (#16626)	5 months ago
connector.go	cmd/k8s-operator: allow specifying replicas for connectors (#16721)	4 months ago
connector_test.go	cmd/k8s-operator: allow specifying replicas for connectors (#16721)	4 months ago
depaware.txt	tsnet: enable node registration via federated identity	3 weeks ago
dnsrecords.go	k8s-operator: add IPv6 support for DNS records (#16691)	3 months ago
dnsrecords_test.go	k8s-operator: add IPv6 support for DNS records (#16691)	3 months ago
egress-eps.go	all: rename variables with lowercase-l/uppercase-I	1 month ago
egress-eps_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
egress-pod-readiness.go	cleanup: fix typos across multiple files	3 weeks ago
egress-pod-readiness_test.go	cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)	9 months ago
egress-services-readiness.go	all: rename variables with lowercase-l/uppercase-I	1 month ago
egress-services-readiness_test.go	all: rename variables with lowercase-l/uppercase-I	1 month ago
egress-services.go	all: rename variables with lowercase-l/uppercase-I	1 month ago
egress-services_test.go	all: rename variables with lowercase-l/uppercase-I	1 month ago
ingress-for-pg.go	cmd/k8s-operator: add support for taiscale.com/http-redirect (#17596)	4 weeks ago
ingress-for-pg_test.go	cmd/k8s-operator fix populateTLSSecret on tests (#18088)	4 weeks ago
ingress.go	cmd/k8s-operator: add support for taiscale.com/http-redirect (#17596)	4 weeks ago
ingress_test.go	cmd/k8s-operator: fix statefulset template yaml indentation (#18194)	1 week ago
logger.go	cmd/k8s-operator: send operator logs to tailscale (#17110)	3 months ago
metrics_resources.go	cmd/k8s-operator: configure proxies for HA Ingress to run in cert share mode (#15308)	9 months ago
nameserver.go	cmd/k8s-operator: use stable image for k8s-nameserver (#17985)	1 month ago
nameserver_test.go	cmd/k8s-operator: use stable image for k8s-nameserver (#17985)	1 month ago
nodeport-service-ports.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	6 months ago
nodeport-services-ports_test.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	6 months ago
operator.go	cmd/k8s-operator: don't log errors on not found objects. (#18142)	2 weeks ago
operator_test.go	cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140)	2 weeks ago
proxyclass.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	6 months ago
proxyclass_test.go	cmd/k8s-operator, k8s-operator: support Static Endpoints on ProxyGroups (#16115)	6 months ago
proxygroup.go	cmd/k8s-operator: rename 'l' variables (#17700)	2 months ago
proxygroup_specs.go	cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252)	5 days ago
proxygroup_test.go	cmd/k8s-operator: rename 'l' variables (#17700)	2 months ago
sts.go	cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252)	5 days ago
sts_test.go	cmd/k8s-operator: rename 'l' variables (#17700)	2 months ago
svc-for-pg.go	cmd/k8s-operator: remove Services feature flag detection	2 months ago
svc-for-pg_test.go	all-kube: create Tailscale Service for HA kube-apiserver ProxyGroup (#16572)	5 months ago
svc.go	cmd/k8s-operator: warn if users attempt to expose a headless Service (#18140)	2 weeks ago
testutils_test.go	cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252)	5 days ago
tsclient.go	cmd/k8s-operator: support workload identity federation	2 months ago
tsclient_test.go	cmd/k8s-operator: support workload identity federation	2 months ago
tsrecorder.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	1 month ago
tsrecorder_specs.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	1 month ago
tsrecorder_specs_test.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	1 month ago
tsrecorder_test.go	cmd/k8s-operator: add multi replica support for recorders (#17864)	1 month ago